Package org.springframework.security.oauth2.server.resource.introspection

Interface OpaqueTokenIntrospector

All Known Implementing Classes:
NimbusOpaqueTokenIntrospector, SpringOpaqueTokenIntrospector
Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
@FunctionalInterface public interface OpaqueTokenIntrospector
A contract for introspecting and verifying an OAuth 2.0 token. A typical implementation of this interface will make a request to an OAuth 2.0 Introspection Endpoint to verify the token and return its attributes, indicating a successful verification. Another sensible implementation of this interface would be to query a backing store of tokens, for example a distributed cache.
Since:
5.2

  • Method Details

    • introspect

      OAuth2AuthenticatedPrincipal introspect(String token)
      Introspect and verify the given token, returning its attributes. Returning a Map is indicative that the token is valid.
      Parameters:
      token - the token to introspect
      Returns:
      the token's attributes